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Description 
Secure Postage Payment System and Method 



Technical Field 



The invention relates to postage payment 



systems and methods, and particularly to systems and 
methods for managing and securely dispensing postage 
payments . 

5 

Background of the Invention 



process, transfer, and store data is ubiquitous. To 
prevent tampering or unauthorized use of the data which 
10 contains vital information, cryptographic technology has 
been developed. 



maintaining secrecy of data communications include a data 
encryption standard (DES) method. For details on the DES 

15 method, one may refer to: M. Smid et al . , "The Data 

Encryption Standard: Past and Future," Proceedings of the 
IEEE , Vol. 76, No. 5, May 1988. This method requires a 
DES algorithm, and a secret key known only to the sender 
and recipient of the data. The DES algorithm involves a 

2 0 number of iterations of a simple transformation of the 
data using the key. In each transformation, 
transposition and substitution techniques are alternately 
applied to the data. 



2 5 method, named after its developers, Rivest, Shamir and 

Adleman. For details on the RSA method, one may refer 
to: R. Rivest et al . , "A Method for Obtaining Digital 
Signatures and Public Key Cryptosystems , " Communi c a t i ons 
of the ACM , Vol. 21, No. 2, February 1978. The RSA 

3 0 method involves *a public key algorithm which uses a 

private key and a public key for data encryption. Unlike 
a private key, a public key can be published and made 



In this information age,, use of computers to 



Well-known cryptographic methods for 



Also well-known is the RSA cryptographic 
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known to the public. The keys for the RSA algorithm are 
generated mathematically, and are computational inverses 
to each other. The success of the RSA method depends on 
the use of very large numbers for the keys. 
5 In addition to providing encryption of a data 

message, some cryptographic methods can also be used to 
authenticate the message. For example, public key 
encryption algorithms such as the aforementioned RSA 
algorithm can be used to produce a "digital signature" 

10 for verifying the origin of the message and the identity 
of the sender. Another algorithm known as the "Digital 
Signature Algorithm (DSA) " can be used for that purpose 
as well. A digital signature is distinct for each data 
transaction. When a message is encrypted at the sender's 

15 end, the sender uses his/her private key to digitally 

sign the message. When the message is decrypted at the 
recipient's end, the recipient uses the sender's public 
key to verify the digital signature. If any alteration 
in either signature or message occurs, the signature does 

2 0 not verify. 

Another well-known method for verifying the 
authenticity of a data message is based on the idea of 
arbitrated authentication. In accordance with this 
method, a third-party certification authority (sometimes 
25 called a "digital notary") certifies an individual's or 
entity's public key so that the authority authenticating 
the digital signature is assured that the public key used 
to verify the message contents is truly associated with 
the sender . 

3 0 Because of the ubiquitous presence of computers 

(in particular, personal computers (PCs) ) , prior art has 
suggested use of a general purpose computer, in lieu of a 
specialized postage meter, to print postage indicia 
serving as a proof of postage on mail pieces. To deter 
35 printing of unauthorized postage, the postage indicium 
applied on a mail piece includes postal data which is 
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digitally signed, and thereby can be authenticated by a 
postal authority when the mail piece is processed. To 
facilitate the mail processing, the indicium is generated 
in the form of a bar-code readable by a scanner. 

5 

Summary of the Invention 

In accordance with the invention, a postage 
payment system incorporating a general purpose computer 
is capable of securely dispensing postage, and 

10 efficiently generating mail pieces. In particular, with 
the inventive postage payment system, postage indicia are 
advantageously generated at the same time as mail 
contents such as letters, invoices, and statements. In 
accordance with an aspect of the invention, a postage 

15 indicium is applied onto a selected location of the mail 
content. In the preferred embodiment, the mail content 
is placed into a window envelope such that the postage 
indicium on the mail content exposes through a window of 
the envelope to facilitate inspection of the indicium. 

20 In addition, the inventive system is capable of 

conducting encrypted communications, and loading and 
dispensing of postage funds stored in a secure integrated 
circuit (IC) card. Moreover, the inventive system 
provides charge-back accounting capabilities to account 

25 for postage expenses by individuals or departments. 

Further, the inventive system is capable of extracting 
from the mail contents certain postal data such as zip 
code data for inclusion in a postage indicium. 

Still further, we have revolutionized the 

30 concept of a postage indicium which is traditionally used 
as a proof of postage for mailing services rendered by a 
postal authority, such as the United States Postal 
Service (USPS) . We have recognized that a postage 
indicium is documentation of a transaction by the 

35 originator of the indicium. Thus, in accordance with 
another aspect of the invention, by incorporating, in 
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addition to the traditional postal data, transactional 
data including a transaction amount and payment 
instructions in a postage indicium, the indicium becomes 
a money order payable to a specified payee. In that 
5 instance, when the postal authority inspects the 

indicium, recognizing that at least part of the indicium 
represents a money order, the postal authority acts as a 
payer bank and pays the transaction amount to the 
specified payee according to the payment instructions. 

10 As such, the postage indicium can be used not only as a 
proof of postage for the mail piece being delivered by 
the postal authority, but also as a money order to pay 
bills or repay debts to any party which may or may not be 
the recipient of the mail piece. 

15 In particular, by specifying the payee of the 

money order represented by the indicium to be a courier 
(e.g., FedEx) different from the postal authority, and 
the transaction amount to be the cost of the courier 
service, we have invented a universal postage indicium 

2 0 for paying any courier service. 

Brief Description of the Drawing 



invention will become apparent from the following 
25 detailed description taken in conjunction with the 

accompanying figures showing a preferred embodiment of 
the invention, in which: 



circuit (IC) card used in the system of Fig. 1 to 
dispense postage; 

Fig. 3A illustrates a document generated by the 
system of Fig. 1 in accordance with the invention; 



Further objects, features and advantages of the 



30 



Fig. 1 illustrates a postage payment system in 
accordance with the invention ; 

Fig. 2 is a block diagram of an integrated 
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Fig. 3B illustrates a window envelope in 
accordance with the invention for enclosing the document 
of Fig. 3A; 

Fig. 4 is a flow chart depicting the steps of a 
5 mailing application program used in the system of Fig. 1; 

Fig. 5 is a flow chart depicting the steps of a 
routine run by a mail processor in the system of Fig. 1; 

Fig. 6 illustrates a postage indicium generated 
by the system of Fig. 1; 
10 Fig. 7 illustrate a second postage indicium in 

accordance with the invention; and 

Fig. 8 is a table enumerating different data 
fields in a bar-code portion of the indicium of Fig. 7. 

Throughout the figures of the drawing, the same 
15 reference numerals and characters are used to denote like 
features, elements, components or portions of the 
illustrated system. 

Detailed Description 

20 Fig. 1 illustrates postage payment system 100 

embodying the principles of the invention. As shown in 
Fig. 1, system 100 comprises computer 103 (e.g., a 
standard PC or workstation), mail processor 150, 
integrated circuit (IC) card 180, and printer 190 (e.g., 

25 a standard inkjet or laser printer) . In particular, 
installed on computer 103 is a mailing application 
program in accordance with the invention. Also installed 
on the computer is conventional word processor, billing, 
accounting and/or other software which, among other 

3 0 things, enables a user to generate mail contents in text 
and graphics. Computer 103 is connected to mail 
processor 150. 

Central to mail processor 150 is microprocessor 
155 which, among* other things, communicates and processes 

3 5 data to and from various interfaces. These interfaces 

include communications interface 161 for connection with 
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computer 103 as mentioned before, serial interfaces 163 
and 165 for connection with devices such as a 
conventional optical scanner^te.g. ; a bar-code scanner) 
I and postage scale^'^CMCIA or serial ( PCMCIA/ serial ) 

5 interface 167 for interfacing with IC card 180, and 
printer parallel interface 169 for connection with 
printer 190. 

Processor 150 includes rate storage 156 for 
storing rate schedule data relating to different courier 
10 services. Because of the volume of the data involved, 
storage 156 in this instance is dedicated, and a non- 
volatile memory which may be an electrically erasable 
programmable read-only memory (EEPROM) , a flash EE PROM, 
or a battery-backed random- access memory (RAM) . The rate 
15 schedule data may be stored in a manner typified by 
^ tables or other formats to facilitate the search by 

Z/^r microprocessor ^=&- for correct postage rates for the mail 

piece being processed. Other related information for use 
in optimum methods to obtain postage may also be stored 
20 in storage 156. As is well known, the cost of delivery 
of a mail piece to a destination depends upon not only 
the weight of the mail piece, but also the particular 
courier service used, the destination zone, the class of 
shipment, and the selected service options. For example, 
25 in the United States, courier services such as USPS, 
United Parcel Service (UPS) and FedEx each have 
independent, different postage rates, and charges for 
different service options. For instance, USPS has 
various rates for first, second and third mailing 
3 0 classes, standard (A) classes, express mail service, 
priority mail service, parcel post service, book rate 
service, etc. UPS levies extra charges for service 
options such as the collect on delivery (COD) , delivery 
confirmation response (DCR) and declared value (DV) 
35 options. 
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Mail processor 150 also includes memory 158 for 
storing a control program, which contains various 
routines for microprocessor 155 to perform in carrying 
out different functions to be described. 
5 Referring to Fig. 2, IC card 180 has PCMCIA/ 

serial interface 201 for interfacing with and insertion 
into mail processor 150, and includes cryptographic 
processor 205, and secure memory 207. The components in 
IC card 180 may be realized using a chip set of the type 

10 of the NETARMOR VMS310 chip set manufactured by VLSI 

Technology, Inc, or alternatively the chip set typified 
by smart card technology. 

Secure memory 20 7 which is a nonvolatile memory 
comprises a descending register and an ascending 

15 register. In a conventional manner, the descending 

register is used to keep track of an amount of postage 
available for dispensation. On the other hand, the 
ascending register is used to keep track of an amount of 
postage dispensed. It may be desirable to store the 

20 accounting data in the registers redundantly, as set 

forth in PCT Pub. No. WO 89-11134. In addition, it is 
extremely desirable to protect the memory from harm due 
to processor malfunction, as set forth in U.S. Patent No. 
5,276,884, in EP Pub. No. 527010, or in EP Pub. No. 

25 737944. 

When the value of the descending register 
decreases over time below a predetermined limit, system 
100 can no longer dispense postage until the descending 
register is reset. Such a reset can be accomplished 

30 using well-known telemeter setting (TMS) techniques. For 
example, some of these techniques are disclosed in EPO 
Pub. No. EP 442671, PCT Pub. No. WO 86-05611, U.S. Patent 
No. 5,237,506, and U.S. Patent No. 4,097,923. 

Using "a TMS technique in this instance, the 

35 user need not carry card 180 to a postal authority for 

authorized resetting of the register. To initiate a TMS 
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process in system 100, the user is required to enter a 
key or password on mail processor 150 using its keypad 
(not shown) . Verification of the password entry ensures 
that the user is authorized to conduct such a process. 
5 After the password entry is verified, processor 150 



in computer 103 to a computerized central facility) ^ 

A 

requestxng additional available postage . Upon receipt of 

the call, the central f acility^verif ies specified 

10 encrypted data stored in secure memory 207 of card 180, 

and ascertains the availability of funds in the user's 

prefunded escrow account. After the encrypted data is 

validated and the Junds are found to be sufficient, the 

central f acilityjcfebits the user's account and remotely 

A 

15 resets the descending register in card 180 accordingly. 
A message is then communicated to mail processor 150, 
confirming the funds transfer. 



on card 18 0 may also be recharged at an automatic teller 
2 0 machine (ATM) or a similar machine using an ATM card, a 
credit card, debit card, charge card, telephone calling 
card, telephone prepaid card or prepaid transit fare 
card, or at a vending machine using cash; or recharged 
using other funds transfer techniques including , 



network, the ATM network, the EFT network, the Internet, 
etc . 

Secure memory 2 07 also includes an encryption 
algorithm, e.g., an RSA algorithm, a digital signature 

3 0 algorithm (DSA) or similar algorithm, and the public and 
private keys associated therewith. For instance, using 
the DSA, cryptographic processor 2 05 may encrypt 
specified postal data with the public key, together with 
any transactional data in accordance with the invention 

3 5 (described below) , and/or sign the data with the private 
key to produce a digital signature to be included in a 



initiates a call through a modem 




It will be appreciated that the postage funds 



25 



electronic funds transfer (EFT) 
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postage indicium for its authentication. In addition, 
the stored public key may be provided in the indicium for 
c the postal authority^c? verify the digital signature. 

It will be appreciated that in secure memory 
5 207, which may be multiple discrete memory devices, 

critical information may be stored in a redundant and 
historical manner for the purpose of analysis leading to 
reconstruction of events regarding funds administration. 

As mentioned before, the user may utilize the 
10 word processor, billing and/or accounting software on 

computer 103 to generate mail contents such as letters, 
invoices and statements. Traditionally, the mail content 
after it is generated is placed into an envelope, and a 
proof of postage is then applied onto the envelope. The 
15 resulting mail piece is ready to be sent. We have 

recognized that such a practice is inefficient in that 
the generation and application of the proof of the 
postage is a separate step from the generation of the 
mail content. In accordance with the invention, with the 

2 0 aforementioned mailing application program, the step of 

generation and application of a postage indicium is made 
part of the mail content generation step. Specifically, 
the mail content is printed at the same time as the 
postage indicium. In the preferred embodiment, the 
25 indicium is printed at a selected location of the mail 
content such that after it is placed in a window 
envelope, the indicium is exposed through a window of the 
envelope for inspection. 

Fig. 3A illustrates mail content 3 00 generated 

3 0 by system 100 in accordance with the invention. As shown 

in Fig. 3A, postage indicium 305 is printed in the upper 
right corner of the mail content. Fig. 3B illustrates 
corresponding window envelope 34 0 for enclosing mail 
content 300. As shown in Fig. 3B, envelope 340 includes 
3 5 window 347 in its upper right corner where a proof of 
postage is traditionally placed. Window 347 may be 
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uncovered, or covered by glassine or similar transparent 
or translucent material . In accordance with the 
invention, window 347 coincides with postage indicium 305 
when mail content 300 is folded and placed into envelope 
5 340. 

It will be appreciated that where it is 
allowed, postage indicium 305 will be printed close to or 
become part of an address block so that a traditional 
window envelope can be used, whose window coincides with 

10 the address block. In addition, non- window envelopes can 
also be used in the event that the postage indicium can 
be scanned through the envelopes using an infrared, a 
magnetic, or similar scanner. 

The aforementioned mailing application program 

15 installed on computer 103 will now be described. By way 
of example, the program in question is invoked by the 
user after the text of a document has been entered using 
the word processor capability on computer 103 and the 
user has decided to send the document. Fig. 4 is a flow 

2 0 chart depicting the steps of the mailing application 

program. Instructed by such a program, computer 103 
elicits from the user the identity of the document to be 
sent, as indicated at step 401. After the user 
identifies the document by its name and path on computer 
25 103, the latter at step 405 queries the user for the 

method of shipment. Accordingly, computer 103 at step 
410 displays a list of shipment methods for the user to 
select. The selection may be accomplished by pointing 
and clicking at the desired method using an indicator 

3 0 device such as a mouse (not shown) connected to computer 

103 . 

As soon as the user selects one of the shipment 
methods, say, USPS first class mail, computer 103 at step 
415 queries the user for any optional services to be used 
35 for the shipment. Accordingly, computer 103 at step 420 
displays a list of optional services applicable to the 
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selected shipment method. After the user selects one of 
the optional services, say, certified mail, computer 103 
queries the user for the stock weight or type of the 
paper to be used for printing the document, as indicated 
5 at step 425. Upon receiving the stock weight or type 

entry, say, 24 lbs. (or bond "x"), computer 103 at step 
43 0 queries the user for the stock weight or type and 
size of the envelope to be used. In this instance, the 
user indicates that a 24 lb. (or tyvek "x") #10 envelope 
10 is to be used. Computer 103 then queries at step 432 

whether there are any enclosures and the weight thereof . 
In this instance, the user indicates that there is no 
enclosure . 



15 capability, computer 103 at step 435 retrieves the 

identified document on the screen, and prompts the user 
to indicate the desired location on the document where 
the postage indicium is to be printed. Alternatively, 
predefined setups for different formats may be utilized. 

2 0 In this instance, the user indicates the location being 

the upper right corner of page 1 of the document . 
Computer 103 thereafter provides at step 440 a draft 
option which enables the user to preview the document 
including a specimen indicium appearing at the user 
25 defined location before the document is printed. Thus, 
this option allows the user to check the format of the 
document and the relative placement of the address block, 
postage indicium and such on the document before the user 
is committed thereto. 

3 0 After the user decides to proceed with the 

printing of the document, computer 103 at step 445 
generates an ensemble of control characters 
representative of the above user responses. At step 450, 
computer 103 transmits the data stream representative of 
3 5 the text of the document to mail processor 155, along 
with a control sequence comprising the ensemble of 



Utilizing, in part, the word processor 
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control characters preceded by a header. This header 
comprises a special character pattern and contains 
information on the length of the ensemble. 

The data stream is formatted pursuant to the 
5 protocol required by printer 190. For example, if 

printer 190 is a printer manufactured by Hewlett-Packard 
Co., the data stream would be in accordance with the 
Hewlett-Packard printer control language (HP-PCL) . 

After the data stream and the control sequence 

10 are received by mail processor 150, the latter searches 
the input for the aforementioned special character 
pattern in the header. In an absence of such a pattern, 
processor 150 determines that the input consists of only 
plain print data (i.e., plain text). If that is the 

15 case, the input would be passed onto printer 190 through 
interface 169 without modification. However, in this 
instance, the special character pattern has been detected 
by mail processor 150 . Such a detection invokes a 
postage payment routine stored in memory 158. 

20 Fig. 5 illustrates a flow chart depicting the 

steps of the postage payment routine. Instructed by this 
routine, microprocessor 155 searches the data stream and 
control sequence to obtain pertinent information to 
compute the required postage and to place the postage 

2 5 indicium at the user defined location. From the data 

stream, microprocessor 155 locates the destination 
address and learns its zip code, and derives the number 
of pages in the document, as indicated at step 501. From 
the control sequence, microprocessor 155 learns the above 

3 0 information provided by the user including the method of 

shipment, selected optional services, stock weight /type 
of the paper, stock weight /type and size of the envelope, 
the location of the postage indicium, etc., as indicated 
at step 505. Microprocessor 155 then computes at step 
35 510 the weight of the would-be mail piece using the 

knowledge of the number of pages of the document, stock 
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weight of the paper, and stock weight and size of the 
envelope. Based on the computed weight, and the 
knowledge of the destination zip code, method of shipment 
and selected optional services, microprocessor 155 at 
5 step 515 obtains from the rate schedule in storage 156 
the relevant shipping rates. Microprocessor 155 then 
calculates at step 520 the required postage. At step 
525, microprocessor 155 sends the required postage and 
postal information including the zip code information to 
10 IC card 180 through PCMCIA/serial interface 167. 

Alternatively, the user may manually enter the weight and 
rates . 



in card 180 deducts the required postage value from the 
15 available postage funds in the aforementioned descending 
register, and accordingly adds same to the dispensed 
funds in the ascending register to account for the 
transaction. Processor 205 then provides to mail 
processor 150, a digital signature and other necessary 
2 0 information such as the ascending and descending register 
values, for creating a postage indicium in processor 150. 
Alternatively, processor 205 itself may create the 
postage indicium and pass it onto mail processor 150. In 
any event, in this instance the postage indicium includes 

2 5 human readable information and a 2 -dimensional bar-code 

pursuant to, say, the well-known Uniform Symbology 
Specification PDF 417. It should be noted that a one- 
dimensional bar-code may be used in lieu of a 2- 
dimensional bar-code if the former should have sufficient 

3 0 data capacity. 



created in mail processor 150, where human readable 
portion 605 in this instance includes information 
concerning the p'bstage, mailing date, etc., and bar-code 
35 portion 610 is representative of the postal data required 



Upon receiving such information, processor 205 



Fig. 6 illustrates one such postage indicium 



PCT/US97/06831 



-14- 

by the postal authority, and the digital signature for 
authenticating the indicium as mentioned before. 

However, it should be pointed out at this 
juncture that by further including transactional data in 
5 human readable portion 605 and bar-code portion 610 in 

accordance with the invention, the indicium of Fig. 6 may 
also be used as a secure money order payable to a 
specified payee. In particular, as described 
hereinbelow, if the payee is specified to be a courier 

10 service such as the FedEx service, the postage indicium 

would represent a service payment to the courier service. 
As such, the present postage payment routine and the 
above -described mailing application program are 
applicable not only to the postal service but other 

15 courier services. 

Referring back to Fig. 5, after microprocessor 
155 receives from card 180 the aforementioned 
information, it creates the postage indicium of Fig. 6 
using the received information, as indicated at step 530. 

20 microprocessor 155 at step 535 generates control 

instructions compatible with the language of printer 190 
for printing the indicium in the user defined position 
(in this instance, the upper right corner of page 1 of 
the document). At step 540, microprocessor 155 inserts 

25 the control instructions into the data stream 

representative of the text of the document. The revised 
data stream is then transmitted to printer 190 through 
interface 169, as indicated at step 545. Accordingly, 
printer 190 generates the document including the proper 

3 0 postage indicium in the upper right corner of page 1 

thereof. As a result, when the document is folded and 
inserted in a window envelope such as envelope 34 0 in 
Fig. 3B, the indicium is exposed and can readily be 
inspected. 

35 It should be noted at this point that it is 

advantageous to have the postage indicium printed on the 
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mail content particularly when automated inserting 
equipment is used to enclose inserts with the mail 
content. As the automated inserting equipment processes 
encoded data on the mail content indicative of certain 
5 inserts (e.g., a pamphlet) to be added to the mail piece, 
by correlating the postage amount in the indicium with 
the weight of the inserts, the equipment ensures that the 
correct inserts are added. 

In a company environment, mail processor 150 is 

10 most likely connected to a number of computers similar to 
computer 103 in a network arrangement to generate mail 
contents. In addition, in such an environment, an 
accounting of the postage expenses may be necessary to 
charge back individuals or departments responsible 

15 therefor. To that end, the postage payment routine of 
Fig. 5 performed in mail processor 150 can readily be 
modified. Specifically, at step 501, microprocessor 155 
can also search the data stream representing the text of 
the document for the author's identity and/or 

2 0 authorization, which may be his/her name in the signature 

block, telephone number, preselected password and/or code 
appearing in the text. With the identity and/or 
authorization information, microprocessor 155 can 
attribute the corresponding postage expense to the author 
25 himself /herself or to his/her department while the mail 

content is being generated. This is advantageous because 
otherwise, if the charge -back accounting is performed 
after the preparation of the mail content, for instance, 
when the postage indicium is applied on an envelope, 

3 0 special equipment such as a scanner for scanning the 

indicium may be required for that purpose. 

In addition, by using the above charge-back 
accounting technique, microprocessor 155 can also 
attribute the postage expense to a user/department before 
3 5 the postage indicium is applied. This is advantageous in 
that if the user/department is identified to be 



WO 97/40472 



PCTYUS97/06831 



-16- 

unauthorized to expend postage funds in system 100, e.g., 
not on an authorized list kept in processor 150, the 
generation of the mail content, together with the postage 
indicium, would be suspended to prevent fraudulent or 
5 unauthorized use. An unauthorized use may stem from a 
depletion of postage funds previously allocated to the 
user/department account . 

In any event, an exception report identifying 
the unauthorized user /department may be generated by 

10 processor 150 through printer 190. If after an 

investigation, the individual /department is determined to 
be allowed to expend postage funds in system 100, the 
suspended job may be reactivated and the individual/ 
department as identified by processor 150 is then added 

15 to the authorized list. 

Processor 150 can also maintain a database to 
automatically collect information about mail contents 
processed thereby including the corresponding postage 
information. Such a database is useful in many ways. 

2 0 For example, it can be used to furnish secure audit 

trails for a long-term security check against fraudulent 
attempts to compromise the integrity of the postage 
dispensing function of system 100. In particular, the 
secure audit trails provide a parametric feedback of 

2 5 multiple users/accounts commingled and used randomly in 

real time. 

In addition, with the above database, various 
statistical analyses can be performed, and statistics 
such as the median postage expense per mail piece, the 
30 most popular shipment method used, etc. can be generated. 
Based on such statistics, a company can cut costs, for 
example, by encouraging the employees to use a less 
expensive, albeit less popular, courier service whenever 
it is possible. 

3 5 The above database can also be used for 

tracking the mail pieces generated by system 100, each of 
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which may be uniquely identified by, for example, its 
source, destination, time of generation, etc. 

The above charge-back accounting and database 
are realized based on the mail pieces generated within 
5 system 100. For mail pieces generated outside system 
100, the accounting and database in question can be 
similarly realized by using a conventional scanner 
connected to mail processor 150. In particular, if the 
user's name, account number destination zip code, 
10 special routing data, etc. are encoded in a bar-code on 
the face of the mail pieces, a bar-code scanner can be 
□ used to extract the information therefrom. Otherwise, an 

1% optical character recognition (OCR) scanner or a similar 

'''*4 device is used to scan the text appearing on the 

^ 15 envelopes, postcards, etc. With the extracted 
iQ information, accounts for charge-backs may. be 

?=y automatically created, updated and maintained. 

The required postage for the above mail pieces 
[J processed by processor 150 may be determined by a 

i2 20 conventional electronic postage scale connected to 
*0 processor 150. Again, before processor 150 generates a 

" postage indicium on a label to be applied onto a mail 

piece, the validity of the user account can be checked to 
prevent fraudulent or unauthorized use. Of course, if 
25 such illegitimate use is not anticipated, the scanning of 
the -mail pieces may be performed after the generation of 
the postage indicium or confirmation of the postage 
dispensation. 

In addition to using a postage indicium as a 
3 0 proof of postage, using the indicium to pay bills, repay 
debts, and purchase products and services in accordance 
with the invention will now be described. Each household 
each month needs to pay numerous bills including utility 
bills, credit card bills, insurance payments, etc. The 
35 most common method of payment of the bills is writing 

paper checks for the appropriate amounts and mailing such 
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checks to payees. However, when the mailing occurs close 
to the deadline for the payment, which is common, the 
check is oftentimes still in transit on the due date. 
Accordingly, a notice is sent by the payee indicating an 
5 overdue balance, which usually has been paid by the time 
the notice reaches the payer as the payee has already 
received the check before then. This practice proves to 
be annoying to the payer and a waste of resources to the 
payee in sending out unnecessary notices. This being so, 
10 there exists a need for an efficient method for remitting 
payments . 

P In solving such a need, we have revolutionized 

the concept of a postage indicium which is traditionally 
'Nj used as a proof of postage. We have recognized that a 

i-Y5 15 postage indicium is documentation of a transaction by the 
C ; originator of the indicium. In accordance with the 

invention, by incorporating, in addition to the postal 
M data, transactional data including a transaction amount 

\H and payment instructions in a postage indicium, the 

rr 2 0 indicium becomes a financial instrument similar to a 
US money order payable to a specified payee. 

" Fig. 7 illustrates postage indicium 700 in 

accordance with the invention. As shown in Fig. 7, 
indicium 700 includes human readable portion 705 and bar- 
25 code portion 710. Unlike portion 605 of Fig. 6, portion 
705 includes human readable transactional data 708 
indicating a payment (e.g., $10.00) to a specified payee 
(e.g., XYZ Co.). As described hereinbelow, like postage 
709 (e.g., $0.32), the payment amount (i.e., $10.00) was 
3 0 deducted from the available funds in the descending 
register in card 180 when indicium 700 was created. 
Thus, the originator of indicium 700 in this instance 
expended $10.00 additional postage (i.e., in addition to 
the $0.32 postage for the cost of delivery of the mail 
35 piece on which indicium 700 is applied) in favor of the 
postal authority. This additional expended amount is to 
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be paid by the postal authority to the payee in a manner 
to be described. 

Moreover, unlike bar-code portion 610 
representing the required postal data and digital 
5 signature, portion 710 additionally includes 

transactional data. However, like portion 610, the data 
in portion 710 is readable by the postal authority when 
it uses a conventional bar-code scanner to process the 
indicium. In accordance with the invention, after 
10 learning the transactional data in portion 710, the 

postal authority pays the specified amount to the payee. 
O Fig. 8 illustrates different data fields in 

bar-code portion 710. In particular, fields 801a through 
Si 8 °lg contain the transactional data in accordance with 

•!~ 15 the invention. Specifically, field 801a contains data 
yg identifying the payer and particularly data identifying 

•= y the payer account with the payee for proper credit of the 

j ss t payment. For example, the payee, XYZ Co., in this 

[U instance is a credit card company. The payer is a credit 

J]|r 2 0 card holder who originated indicium 7 00 to pay his/her 
Uy credit card balance (e.g., $10.00) in accordance with the 

*" invention. Thus, in this example, the data in field 801a 

is most likely the payer's credit card account number. 

Field 801b contains data identifying the payee, 
25 and the payee's bank account if a transfer of funds (in 
this instance in the amount of the credit card balance) 
by the postal authority to the payee is anticipated to 
realize the bill payment. In this instance, the data in 
field 801b represents the name of the payee and an EFT 
30 routing number identifying the payee's bank account. 

Field 801c contains data representing a 
transaction amount, which in this instance is $10.00. 

Field 801d contains a data bit. A first value 
(e.g., a binary "1") of this data bit indicates to the 
3 5 postal authority that the payment is realized by funds 
transfer to the payee. A second value (e.g., a binary 
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"0") indicates to the postal authority that the payment 
is realized by paying cash to the payee. In this 
instance, the data bit is set to the first value. 

Field 801e contains data representing a 
5 personal identification number (PIN) which is used for 
security reasons described hereinbelow. 

Field 801f contains data identifying the 
present transaction, which may be a transaction sequence 
number. With this data, the payer can communicate with 

10 the postal authority to, for any reason, cancel the 

transaction before the transaction is consummated, and 
have the transaction amount (probably less some 
processing fee) returned by the postal authority to the 
payer in cash or deposited into the payer's account with 

15 the postal authority. The postal authority then 
registers at a central computer that the subject 
transaction or postage indicium has been cancelled. 

Field 801g contains data representing special 
instructions to the postal authority concerning the 

20 transaction. For example, the instructions may specify a 
payment date which may be the actual payment due date, or 
an expiration date after which the present transaction is 
no longer valid. In addition, by the special 
instructions, the payer may request the postal authority 

25 to send to the payer a confirmation of payment to the 

payee. Further, the postal authority may apply a digital 
signature onto the confirmation, authenticating the date 
of payment or certifying the funds transfer to the payee. 
The digital signature thus becomes a secure post mark. 

30 Field 801h contains postal data similar to that 

in portion 610, which is required by the postal 
authority. 

Field 801i contains a digital signature 
resulting from signing the data in fields 801a through 
35 801h using the same encryption key as that used to sign 
the postal data in portion 610. If any alteration in 
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either digital signature or any data in fields 801a 
through 80 lh occurs, the digital signature does not 
verify. 

When indicium 700 appearing on a mail piece is 
5 processed by the postal authority's payment handling 

equipment in accordance with the invention, the latter 
verifies the digital signature and registers the 
transactional data in bar-code portion 710. If the 
signature is valid, the equipment checks with a central 

10 computer whether indicium 700 has been cancelled. If it 
has not been cancelled, the equipment initiates an 
electronic transfer of the specified funds to the payee's 
bank account, along with the data identifying the payer 
and/or payer account with the payee for proper credit 

15 thereto. The equipment then communicates to the central 
computer that indicium 70 0 has been paid, thereby 
cancelling the indicium. That is, re-presentation of 
indicium 700 or the information content thereof to any 
payment handling equipment thereafter is countered with a 

2 0 payment denial. 

If the aforementioned payment handling 
equipment is located at designated postal authority mail 
processing locations. The mail piece on which indicium 
700 is applied is addressed to the closest designated 
25 location. It should be noted that since the mail piece 
on which indicium 700 is applied does not need to reach 
the payee to realize the bill payment in accordance with 
the invention, the transit time of the mail piece is 
advantageously shorter than that using the traditional 

3 0 check mailing method. It will be appreciated that the 

transit time of the mail piece can be completely 
eliminated by presenting, in person, indicium 700 at any 
designated location for an immediate bill payment. In 
that case, the cfost of delivery (i.e., the $0.32 postage) 
35 is obviated, and thus postage 709 should show zero. 
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It is noteworthy that the functionalities of 
the above payment handling equipment should be readily 
incorporated in such systems capable of processing mail 
pieces having postage indicia of Fig. 6. The 
5 incorporation simply requires the mail processing system 
to be capable of funds transfer through an EFT network 
and communicating with a central computer, and 
enhancement of software in the system to realize the 
above -described transactional functions. 

10 For the ensuing discussion, without loss of 

generality, we reasonably assume that each mail 
processing system incorporates the payment handling 
functionalities in question. In that case, the mail 
piece on which indicium 7 00 is applied need not be 

15 addressed to any particular postal authority location. 

In fact, it may be applied onto a mail piece addressed to 
anybody, say, a friend. When the mail piece is processed 
by a mail processing system, it not only causes the mail 
piece to be delivered to the friend, but also the 

20 specified payment (i.e., $10.00) to be made to the 

designated payee (i.e., XYZ Co.). For privacy reasons, 
transactional data 708 in that case need not be shown. 
In addition, for an immediate bill payment, the payer can 
present, in person, indicium 700 (less the $0.32 postage) 

2 5 to any post office having a mail processing system, which 
is virtually every post office. 

In accordance with another aspect of the 
invention, indicium 700 (less the $0.32 postage) can be 
used as cash. In that case, the payee shown in 

30 transaction data 708 is "cash" (instead of "XYZ Co."), 

and the data bit in aforementioned field 801d is assigned 
the second value (i.e., "0" in this instance) to indicate 
cash payment. In addition, since any bearer of such an 
indicium is able to cash the indicium for the specified 

35 amount at a post office, the indicium is preferably 

printed on special paper or medium against fraudulent 
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duplication thereof using, say, a photo copier. In any 
event, for fear that the cash- indicium is accidentally 
lost, stolen or duplicated, a PIN can be assigned in 
aforementioned field 801e. In fact, when a mail 
5 processing system recognizes a "0" value in field 801d, 
. it automatically checks for the PIN in field 801e. If 
the latter is a default "NULL" field, indicium 700 is 
regarded as cash. If the field has a value other than 
"NULL; " indicium 700 is regarded as a "traveler's check, 11 

10 which requires PIN verification before it can be cashed. 

In that case, the legitimate bearer of indicium 700 would 
have been provided by the originator of the indicium with 
the correct PIN. 

It should be pointed out that when a PIN is 

15 used in indicium 700, it is preferably encrypted for fear 
that an unauthorized bearer of the indicium would 
otherwise be able to read the PIN from portion 710 using 
a bar-code scanner. For that matter, all other 
transactional data and/or postal data in bar-code portion 

2 0 710 may also be encrypted. 

In accordance with yet another aspect of the 
invention, when indicium 700 (less the $0.32 postage) 
indicating a specified payee (e.g., XYZ Co.) is delivered 
to the payee, without going through any mail processing 

2 5 system, the payee can redeem the indicium at any post 

office as if it were a money order, which is payable only 
to the specified payee. Depending on the value of the 
data bit in field 801d, the payee receives cash for the 
indicium if the data bit has the second value, and 

3 0 otherwise if the data bit has the first value, the payee 

is entitled to a funds transfer in the corresponding 
amount to the payee ' s bank account . 

In particular, by specifying the payee to be a 
courier such as FedEx, indicium 700 (less the $0.32 
35 postage) can be used as payment for the courier service. 
In that case, indicium 700 can accompany or be attached 
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to the package to be delivered by the courier. Using 
such an indicium, or a copy thereof (in the event that 
the indicium is permanently attached to the package) , the 
courier can receive the actual payment from the postal 
5 authority as if it were a money order as described 

before. As such, we have invented a universal postage 
indicium (i.e., indicium 700) good for payment not only 
to the postal authority but any other courier for its 
service . 

10 Generation of indicium 700 is accomplished by 

entering, on mail processor 150, transactional data for 
data fields 801a through 801g in addition to the required 
postal data. The actual transactional data entry may be 
menu driven and achieved using the key pad of processor 

15 150 or the keyboard of computer 103. After receiving the 
transactional data and the postal data, processor 150 
forwards them to cryptographic processor 2 05 in card 180 
for processing. Processor 205 in this instance is 
programmed to deduct the transaction amount (derived from 

2 0 the transactional data) plus the postage amount (derived 
from the postal data) from the available postage funds in 
the descending register, and accordingly adds same to the 
dispensed funds in the ascending register. Based on the 
transactional data and postal data, processor 2 05 then 

25 creates postage indicium 700. Processor 205 thereafter 
transmits image data representative of the indicium to 
mail processor 150 where it is formatted for printing on 
printer 190. 



3 0 transit time in the traditional check mailing method will 
now be described. In accordance with this second 
technique, the contents of the payer's mail piece, 
including a remittance in some specified amount, are 
indicated with certain encrypted information within the 

35 postage indicium on the mail piece. In the alternative, 
the contents are indicated by other markings printed on 



A second technique for reducing the mail 
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the mail piece, or onto a selected area of a sheet of 
paper inside the mail piece such that the markings are 
exposed through an appropriate window in the envelope . 
The encrypted information includes such detail as is 
5 required by the payee to establish confidence in the 
payer's assertion that remittance is being made. For 
example, the encrypted information may include the 
payer's digital signature (guaranteeing the contents 
subject to a legal penalty), the payer's account number 

10 with the payee, the payer's bank account number, the 
amount remitted, etc. 

When the mail piece is received and processed 
by the postal authority's or other courier's automation 
equipment, the aforementioned encrypted information is 

15 electronically read. The portion of the information 

pertaining to the payer's remittance as required by the 
payee is electronically captured and, in a timely 
fashion, communicated to the payee. At the same time, 
the payee is informed of the approximate delivery time of 

20 the mail piece containing the payer's remittance. The 

delivery time is estimated based on the current status of 
the mail piece (e.g., the time and date, location within 
an automated sortation and handling system, etc.) and its 
ultimate destination (the payee's postal or routing code, 

2 5 the carrier sortation route, etc.). 

It should be noted that during the processing 
of the mail piece, the postal authority or courier may 
re-route it to a financial institution for immediate 
deposit of the remittance. Such re-routing instructions, 
30 if any, are provided by the payee. Once receipt of the 

payment is acknowledged by the financial institution, the 
final account reconciliation between the institution and 
the payee is confirmed. 

Further, the encrypted information on the mail 

3 5 piece may also be used to convey data other than monetary 
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data, e.g., partial payment, redirection of payment, and 
order information. 

The foregoing merely illustrates the principles 
of the invention. It will thus be appreciated that those 
5 skilled in the art will be able to devise numerous other 
systems which embody the principles of the invention and 
are thus within its spirit and scope. 

For example, it will be appreciated that 
postage payment system 100 will be expanded to include a 
10 paper handling system, feeder, transport, zip code 

scanner, and/or an envelope printers where appropriate. 

In addition, in the disclosed embodiment, the 
mailing application program of Fig. 4 is used to generate 
a postage indicium on the mail contents. However, such a 
15 program is equally applicable to generating a postage 
indicium on the cover of a mail piece, an envelope, a 
postcard, etc. 

Moreover, in the disclosed embodiment, the 
mailing application program is installed on computer 103 
2 0 only. However, such a program may reside in an 

interactive network, instead, and intercepts a specified 
word processor output to add the requisite control 
sequence to the print stream. 

Further, mail processor 150 may require coded 

2 5 access to postage dispensing. The access may be based on 

person-by-person, department -by-department , or other 
controlled access deemed appropriate. 

Mail processor 150 may also be interfaced with 
a management information system (MIS) capable of invoice 

3 0 processing and printing applications. In that instance, 

mail processor 150 will be used to enhance the MIS 
functions by applying proof of postage directly onto 
invoices concurrently with the preparation of the 
invoices and any 'inserts. The MIS would provide to the 
3 5 mail processor such information as the number of pages, 
inserts, mail class, etc. concerning each invoice, along 
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with weight -related data regarding the envelope and 
content materials. The mail processor would then 
calculate the required postage and properly apply the 
proof of postage to the invoice. 
5 In addition, it will be appreciated that mail 

processor 150 will incorporate a well -know address 
cleansing capability for matching, verifying, and 
correcting the sender and recipient addresses and their 
zip codes. 

10 Moreover, mail processor 150 may allow the user 

to obtain shipping rates of different couriers (e.g., 
UPS, FedEx and USPS) and to compare rates among such 
couriers. It may also be capable of determining the best 
method of shipment based upon user parameters such as 
15 cost and speed. 

Further, mail processor 150 may be capable of 
communicating with a main frame or host computer to 
receive mail processing directions (e.g., set up 
parameters) and printer applications. 
20 Still further, mail processor 150 may be 

capable of printing bar-coded digital signatures on the 
material to be facsimile- transmitted . It can also scan 
or digitally read facsimile-transmitted material at its 
destination using public/private key cryptography to 
25 authenticate the transmission for the recipient. 

Further, it can transmit data with an appropriate digital 
signature using an encryption algorithm provided in a 
control/smart/PCMCIA card such as IC card 180. 

It will also be appreciated that maT^processor 
/ 30 150 can communicate with a third party certification 
authority (e.g., a digital notary) through a 



communication network . g . , the Internet) to provide 
verification to the sender that the recipient has (1) 
received the transmitted data, (2) accessed the 
3 5 transmitted data, and/or (3) converted the transmitted 
data to plain text. 
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In addition, it will be appreciated that card 
180 can be used as a general purpose prepaid card for 
purchasing products and services. Using its 
cryptographic engine, card 180 is also capable of storing 
5 and dispensing digital money in the manner typified by a 
digital wallet or cash card. 

Moreover, in the disclosed embodiment, a TMS 
process is used to replenish the postage in card 180, 
which requires a pre -funded escrow account with the 
10 postal authority. However, it will be appreciated that a 
user will be able to establish a different type of 
|«? account with the postal authority (or any other courier 

or trusted third party) for purchasing the postage, such 
"J as an account based on line of credit pre-approved by the 

J-r; 15 postal authority, a charge card, a debit card, a credit 
«J3 card, etc. Each postage purchase is accompanied by 

* y crediting the corresponding purchase amount to the postal 

j„s, authority. 

Further, it will be appreciated that the user 
\2 20 may purchase the postage on-line (e.g., through a modem 
sJ3 or data set connection) on a transaction by transaction 

" basis using a credit card, debit card, ATM card, etc. As 

soon as a postage indicium is provided as a result of the 
on-line purchase, the card account is debited with the 
25 purchase amount and a postal authority account is 
credited accordingly. 

Moreover, it will be appreciated that portions 
605 and 610 of postage indicium of Fig. 6 and portions 
705 and 710 of indicium 700 may be imparted to a 
30 label/tape for affixing to a mail piece, enclosure or to 
an appropriate location on the contents of said mail 
piece . 

Finally, although postage payment system 100, 
as disclosed, is' embodied in the form of various discrete 
35 functional blocks, the system could equally well be 

embodied in an arrangement in which the functions of any 
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one or more of those blocks or indeed, all of the 
functions thereof, are realized, for example, by one or 
more appropriately programmed processors or devices. In 
particular, in the disclosed embodiment, mail processor 
5 150 and computer 103 are shown to be two separate 

elements. However, it will be appreciated that all or 
part of the functions of processor 150 will be realized 
in computer 103. It will also be appreciated that all or 
part of the functions of computer 103 are realized in 
10 processor 150 with a dedicated/secure printer, thereby 
realizing a self-contained postage metering system. 






